Senior Cloud Security Engineer (AWS / RMF / ATO)

Auria provides solutions and software supporting complex space, national security, and cyber missions for federal, international, and commercial customers. The Senior Cloud Security Engineer will secure AWS cloud-hosted DoD mission systems, execute RMF activities, support ATO authorization, implement security controls and tools, and maintain compliance with DoD cybersecurity standards.

Responsibilities:

• Identify and evaluate cloud-based COTS/GOTS/AWS-native infrastructure components to support and deploy security compliance tooling
• Collaborate with systems engineers and software developers to implement security-by-design principles
• Integrate security controls into CI/CD pipelines, containerized applications, and microservice architectures
• Implement and maintain secure AWS cloud environments supporting DoD mission systems
• Apply secure cloud architecture patterns and AWS security services to support compliance with DoD security requirements
• Implement security controls aligned with NIST 800-53, FedRAMP, and DoD security guidance
• Integrate security controls into DevSecOps pipelines and cloud-native services
• Configure and manage identity, encryption, logging, and network security withing AWS environments
• Execute Risk Management Framework (RMF) activities in accordance within eMASS IAW DoDI 8510.1 and DoDI 8500.01
• Develop and maintain RMF artifacts including:
• System Security Plan (SSP)
• Plan of Action and Milestones (POA&M)
• Risk Assessment Reports (RAR)
• Security Control Traceability Matrix (SCTM)
• Maintain cybersecurity documentation and evidence within eMASS
• Support preparation of ATO packages and security authorization activities
• Coordinate with program ISSMs, cybersecurity lead, government stakeholder to support system accreditation
• Perform vulnerability scanning and remediation using tools such as ACAS, Nessus, OpenSCAP, or SCAP Compliance Checker
• Implement and validate DISA STIGs and security baselines across operating systems, containers, and cloud services
• Support continuous monitoring activities required to maintain system accreditation
• Integrate security controls into CI/CD pipelines, containerized applications, and microservice architectures
• Produce cybersecurity documentation and technical artifacts supporting RMF accreditation
• Participate in technical interchange meetings, system design reviews, integration events, and program management review
• Support cybersecurity testing, demonstrations, and operational deployments

Requirements:

• Bachelor's degree Cybersecurity, Computer Engineering, Computer Science, or related field preferred; equivalent experience considered
• U.S. Citizenship with ability to obtain and maintain a DoD TS/SCI clearance
• 5 years of experience in cybersecurity engineering for DoD, NASA, NOAA or mission-critical systems
• At least 2 years' hands-on experience securing AWS cloud environments
• Demonstrated experience supporting DoD RMF accreditation and ATO processes
• Strong knowledge of:
• • NIST SP 800-53 security controls
• • DoD STIG implementation
• • FedRAMP security requirements
• • DoDI 8510.01 RMF process
• Experience with vulnerability scanning tools such as ACAS or Nessus
• Active DoD Secret or TS/SCI clearance
• Experience with AWS GovCloud or IL4/IL5 environments
• Familiarity with containerized environments (Docker, Kubernetes) and their security implications
• Experience with SIEM platforms, endpoint protection, or security monitoring tools
• Knowledge of Zero Trust Architecture principles
• DoD 8570 / 8140 certification such as:
• • Security+
• • CISSP
• • CASP+
• • CySA+